Application Pool issues

[unclerico]

Windows Server 2003 SP1
IIS 6

I created a new web site in IIS and also created a new Application Pool. I configured the Identity to use a domain user account (domain\payroll) and used ADSIEdit to add a new entry into the servicePrincipalName attribute (HTTP/server.domain.com) and everything works great, but only for that site. In my Default Web Site I have a handful of virtual directories that use the Default Application Pool and they all break when this entry is made into the SPN, but when I remove the entry they come back on-line just fine. What is the deal with this? Thanks in advance.

 

[penauroth]

I presume you used the following commandline syntax

setspn -a http/myserver.mydomain.com mydomain\svcuser

Good. You need to use the service account as the identity for the application pool. Replace network service NTFS perms with the service account.

This should work.

It might be wise to create separate pools for your web applications and use the Network Service account where kerberos authentication is not required.



Paul

Work on Windows, play on Linux.